This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft File: 3l428Vn1dpiPtOUdQQG7hdDQyYM.mft (raw, json) Hash identifier: BporDu40M5LS3wTYwRHkiL+xA+yp1/RYH8OC2+vzYxE= Subject key identifier: CF:67:27:1C:05:B7:94:D2:82:66:6A:F9:AA:BA:A2:A6:E5:7B:A0:7A Authority key identifier: DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83 Certificate issuer: /CN=de5e36f159f576988fb4e51d4101bb85d0d0c983 Certificate serial: 019B126FAA6E30D873C7F8F0A0BC9BE1B5F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft Manifest number: 1175 Signing time: Fri 12 Dec 2025 12:01:06 +0000 Manifest this update: Fri 12 Dec 2025 12:01:06 +0000 Manifest next update: Sat 13 Dec 2025 12:01:06 +0000 Files and hashes: 1: 3l428Vn1dpiPtOUdQQG7hdDQyYM.crl (hash: HAr4uFFtswlmCUYIFweqndLlfdr1mqQ/jzKHBM9i4rc=) 2: CXuHSCaFxVaRaAru4-iFvdd0d-g.roa (hash: po3EKI/Ie4MxQDtGyWIOYbTAnH49FsuKgvn3GW+cz7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 12:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:6f:aa:6e:30:d8:73:c7:f8:f0:a0:bc:9b:e1:b5:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de5e36f159f576988fb4e51d4101bb85d0d0c983 Validity Not Before: Dec 12 12:01:06 2025 GMT Not After : Dec 13 12:01:06 2025 GMT Subject: CN=cf67271c05b794d282666af9aabaa2a6e57ba07a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:71:3c:08:64:79:90:7e:aa:84:95:b4:2c:da: d8:b4:e2:a2:cd:55:93:13:d3:db:ab:42:91:b1:44: fb:bd:5f:35:50:21:e9:93:5f:49:f3:68:a2:cb:9c: 40:89:a0:e7:ce:1e:88:aa:c0:e5:e1:7c:3a:b4:05: ec:56:3e:06:c3:24:b5:b4:3c:bb:52:e9:a4:82:99: 99:00:c2:6e:7f:b2:d3:db:ee:4c:3a:04:bf:c0:40: 54:c2:b7:b7:e9:23:09:3f:f5:6a:1d:cd:57:a6:99: 17:e2:8c:9e:3a:ee:b8:31:73:cb:e6:15:8b:f2:b3: 6b:9e:31:47:96:60:56:7a:60:18:ae:21:71:6f:33: c0:6f:99:c6:2f:21:62:3a:e3:e4:a5:9a:c3:c6:9a: 83:82:40:d6:68:34:ab:62:b1:65:8d:38:b6:ee:ee: 9d:75:8b:8c:f9:ac:13:f2:0d:d7:d2:a5:45:d4:a7: e5:f1:a4:94:e5:90:23:c0:1b:48:89:bf:2c:55:90: 3f:2c:b7:40:3f:01:92:c0:18:7f:0f:f1:40:70:ce: fc:c4:ab:9e:2b:56:86:65:75:fe:dd:f4:5e:88:96: 05:23:78:62:40:73:62:19:5f:13:d3:70:a2:37:f1: c7:a8:b3:1b:c6:78:da:d6:ff:06:3b:86:f3:27:16: c3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:67:27:1C:05:B7:94:D2:82:66:6A:F9:AA:BA:A2:A6:E5:7B:A0:7A X509v3 Authority Key Identifier: keyid:DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:98:c2:0c:3b:f1:7d:fc:45:27:8f:46:71:c5:36:52:e6:0c: 1a:47:9c:2f:13:0a:a4:f5:dd:7b:65:6f:99:58:38:15:54:7d: bd:45:8e:db:73:d3:b0:97:4c:98:47:04:f9:2d:a6:15:ea:a9: 8d:56:f0:d8:46:c5:3f:02:9f:28:19:89:9c:87:19:4d:5f:0e: a6:74:2d:03:d3:b0:54:f9:c9:2a:49:7b:c8:a7:d5:a8:9d:13: b2:49:f8:c9:06:23:a5:e6:c0:32:3f:f3:47:a5:b9:32:f8:a6: e8:16:c1:b9:15:97:2e:f6:de:56:f6:4e:9f:a1:ad:68:bc:17: d9:6b:71:53:22:c5:b8:39:47:9d:0b:c3:05:55:e1:d6:41:03: 2f:2c:ce:e9:c8:c9:f5:2b:92:96:a2:c5:fc:cb:07:28:31:83: 35:8b:42:0c:c2:60:8c:13:39:f2:bc:aa:a9:9a:fc:af:22:67: 76:45:8c:c8:0e:06:01:42:20:f8:84:41:5b:15:50:1e:b7:45: 87:f9:76:a7:fa:3c:eb:41:4b:f3:17:e6:7c:cc:5c:b8:ac:99: 62:4e:39:f2:25:08:0e:05:72:e3:38:b4:ca:de:41:3c:bf:8d: f4:0e:24:64:43:5b:32:e4:84:d2:b6:d8:18:02:75:15:96:75: 0f:59:0e:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSb6puMNhzx/jwoLyb4bXxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNWUzNmYxNTlmNTc2OTg4ZmI0ZTUxZDQxMDFiYjg1ZDBk MGM5ODMwHhcNMjUxMjEyMTIwMTA2WhcNMjUxMjEzMTIwMTA2WjAzMTEwLwYDVQQD EyhjZjY3MjcxYzA1Yjc5NGQyODI2NjZhZjlhYWJhYTJhNmU1N2JhMDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3E8CGR5kH6qhJW0LNrYtOKizVWT E9Pbq0KRsUT7vV81UCHpk19J82iiy5xAiaDnzh6IqsDl4Xw6tAXsVj4GwyS1tDy7 UumkgpmZAMJuf7LT2+5MOgS/wEBUwre36SMJP/VqHc1XppkX4oyeOu64MXPL5hWL 8rNrnjFHlmBWemAYriFxbzPAb5nGLyFiOuPkpZrDxpqDgkDWaDSrYrFljTi27u6d dYuM+awT8g3X0qVF1Kfl8aSU5ZAjwBtIib8sVZA/LLdAPwGSwBh/D/FAcM78xKue K1aGZXX+3fReiJYFI3hiQHNiGV8T03CiN/HHqLMbxnja1v8GO4bzJxbDiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9nJxwFt5TSgmZq+aq6oqble6B6MB8GA1UdIwQY MBaAFN5eNvFZ9XaYj7TlHUEBu4XQ0MmDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8xY2NiZmQtYTY1MS00YzhlLTlkNjAt ZWJiYmI0NDQyODZlLzEvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8xY2NiZmQtYTY1MS00YzhlLTlkNjAtZWJiYmI0NDQyODZl LzEvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArZjCDDvx ffxFJ49GccU2UuYMGkecLxMKpPXde2VvmVg4FVR9vUWO23PTsJdMmEcE+S2mFeqp jVbw2EbFPwKfKBmJnIcZTV8OpnQtA9OwVPnJKkl7yKfVqJ0Tskn4yQYjpebAMj/z R6W5Mvim6BbBuRWXLvbeVvZOn6GtaLwX2WtxUyLFuDlHnQvDBVXh1kEDLyzO6cjJ 9SuSlqLF/MsHKDGDNYtCDMJgjBM58ryqqZr8ryJndkWMyA4GAUIg+IRBWxVQHrdF h/l2p/o860FL8xfmfMxcuKyZYk458iUIDgVy4zi0yt5BPL+N9A4kZENbMuSE0rbY GAJ1FZZ1D1kOOQ== -----END CERTIFICATE-----Generated at Fri Dec 12 19:23:19 2025 by rpki-client